This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft File: vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json) Hash identifier: ORKRGuErWsrSHqCf9OjSpi5vnwzfPkbuuM2A7XqP0JM= Subject key identifier: D6:77:78:A8:A9:21:F0:6E:73:13:95:43:09:32:E0:9D:35:BB:4A:41 Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Certificate serial: 019AF1D1D2A9959AB79C96997ECFADBAECF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=) 2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=) 3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=) 4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=) 5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: y0uO4YzvUhMVOyDdAHSODcccECmS+RCBcN/pMrDlFEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:a9:95:9a:b7:9c:96:99:7e:cf:ad:ba:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=d67778a8a921f06e731395430932e09d35bb4a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:56:86:8e:ca:2d:3a:e5:4f:36:9d:42:14: 44:b4:11:7a:b1:cc:cc:4e:53:ed:0c:a3:80:42:12: f4:22:c6:ad:4d:9f:59:09:2b:d8:50:14:e0:1e:08: 12:bf:32:a3:68:25:8b:d4:6e:6f:fb:7a:e9:6d:21: 84:77:c5:46:f6:91:2e:80:ca:3b:95:c9:ab:4e:1b: 33:a9:4e:a2:5c:c4:f7:ff:84:49:a1:9a:40:ad:70: b2:54:f2:23:66:84:21:d7:1a:4f:6e:81:8d:24:1d: 72:a6:7b:ec:c8:9e:59:20:cf:02:86:8c:6a:9f:0e: ac:41:7b:14:b9:70:2d:b2:8f:f1:31:65:0b:04:a8: 22:10:03:09:cf:5f:3a:36:4b:93:3a:d0:cc:c7:fc: 77:3a:f8:19:2e:ce:13:3c:92:f9:7d:a3:12:b7:5a: 3a:f6:38:82:fd:5c:14:a1:1a:c4:2a:e4:d0:06:a2: 37:b2:e7:6f:8b:11:1e:bc:e5:e6:5a:92:4f:dd:88: d6:ec:08:ec:6d:34:4f:54:0b:a8:c0:69:34:58:7f: e6:71:ef:9d:8c:3c:3c:61:59:6a:c0:e8:5f:d0:d2: e8:64:d9:9d:5e:80:01:e0:99:6b:86:4a:0e:af:67: 2d:8c:a0:6e:af:03:43:8e:02:71:f4:cb:82:57:12: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:78:A8:A9:21:F0:6E:73:13:95:43:09:32:E0:9D:35:BB:4A:41 X509v3 Authority Key Identifier: keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e5:9f:ec:30:26:bf:5f:0f:2d:a7:04:b0:83:4b:55:8c:70: 26:fe:72:57:31:e9:23:50:ca:f1:8d:d2:59:82:c0:2a:82:87: 90:3f:d7:2b:47:80:17:63:7a:18:25:92:01:da:5a:f8:fc:c7: 85:53:7e:b5:9a:d9:df:f7:2b:4a:5b:77:61:cd:d6:72:c0:ea: 43:1e:f4:50:5a:43:2f:4e:a9:2c:9e:f6:66:12:40:f8:bd:97: cb:16:51:4d:a5:e9:27:7e:9e:56:7c:0b:41:c7:bc:d1:1f:79: a6:32:68:0a:ba:71:ab:cd:22:0d:31:8a:7e:02:11:58:0a:14: 21:48:14:d8:05:c8:5a:bc:bb:19:2a:53:8c:f3:d3:b9:97:2a: aa:77:87:75:77:b9:6d:99:23:74:48:df:cd:a4:c5:ba:10:df: 16:ed:86:29:da:3d:05:c3:22:34:f4:d7:2d:48:8e:96:fa:b3: 11:3e:a3:86:0a:58:45:71:aa:0c:01:cc:78:88:69:31:e7:99: b2:65:9c:b0:aa:aa:7a:cb:c4:aa:6d:2c:13:84:62:b1:6b:cb: 6f:b2:ff:75:b3:b9:da:a6:7d:42:93:24:a4:5d:69:e8:14:1e: f3:94:45:a8:2d:06:e1:39:9c:9c:5e:57:a6:06:0d:83:34:8c: a3:a6:45:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dKplZq3nJaZfs+tuuzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky ZmM5OWEwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhkNjc3NzhhOGE5MjFmMDZlNzMxMzk1NDMwOTMyZTA5ZDM1YmI0YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNFWho7KLTrlTzadQhREtBF6sczM TlPtDKOAQhL0IsatTZ9ZCSvYUBTgHggSvzKjaCWL1G5v+3rpbSGEd8VG9pEugMo7 lcmrThszqU6iXMT3/4RJoZpArXCyVPIjZoQh1xpPboGNJB1ypnvsyJ5ZIM8Choxq nw6sQXsUuXAtso/xMWULBKgiEAMJz186NkuTOtDMx/x3OvgZLs4TPJL5faMSt1o6 9jiC/VwUoRrEKuTQBqI3sudvixEevOXmWpJP3YjW7AjsbTRPVAuowGk0WH/mce+d jDw8YVlqwOhf0NLoZNmdXoAB4JlrhkoOr2ctjKBurwNDjgJx9MuCVxKctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZ3eKipIfBucxOVQwky4J01u0pBMB8GA1UdIwQY MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt YWU3NzQ2ZjA5NjMwLzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuWf7DAm v18PLacEsINLVYxwJv5yVzHpI1DK8Y3SWYLAKoKHkD/XK0eAF2N6GCWSAdpa+PzH hVN+tZrZ3/crSlt3Yc3WcsDqQx70UFpDL06pLJ72ZhJA+L2XyxZRTaXpJ36eVnwL Qce80R95pjJoCrpxq80iDTGKfgIRWAoUIUgU2AXIWry7GSpTjPPTuZcqqneHdXe5 bZkjdEjfzaTFuhDfFu2GKdo9BcMiNPTXLUiOlvqzET6jhgpYRXGqDAHMeIhpMeeZ smWcsKqqesvEqm0sE4RisWvLb7L/dbO52qZ9QpMkpF1p6BQe85RFqC0G4TmcnF5X pgYNgzSMo6ZFIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:27 2025 by rpki-client